1. Who is responsible
This Privacy policy applies to the website my2brain.online, operated by my2brain, a Brazilian company based in Brasília, Federal District, Brazil. Under the Brazilian General Data Protection Law (Law 13.709/2018, the LGPD), my2brain is the controller of the personal data handled through the site.
The contact is contato@my2brain.online. This policy takes effect on October 13, 2026.
This policy covers the site only. CHRIS, when it is made available, deals with audio and transcripts of conversations and will have its own privacy notice. Nothing here describes data handling inside the app.
2. A short summary
The site has no form, no login and no sign-up. It uses no analytics, sets no cookies and stores nothing in your browser’s local storage. It uses no ad pixel and no third-party tracking tool.
The only contact channel is the email contato@my2brain.online. We handle your personal data only if you write to us.
3. What data we handle
Data you send us by email. If you write to us, we receive your email address, the date and time of the message, your name (if it appears in the email) and whatever you choose to tell us in the text or attachments. The contact buttons only open the email program on your device. Nothing is sent until you send the message yourself.
Technical access data. When you open a page, the server that delivers the site receives, as on any website, the IP address, the date and time, the address of the requested page, the browser type and the operating system. These records stay with Cloudflare, which hosts the site, and serve the operation and security of the network. We do not use them to identify visitors or to build profiles.
The “Copy address” button. When you click it, it copies the contact email to your device’s clipboard. Nothing is sent and nothing is read back.
Data we do not collect. We do not collect location, contacts, images, audio, payment data, identity documents or sensitive personal data. The site’s fonts are served from the site itself. The browser does not request anything from third-party font services.
4. Why we use it and the legal basis
We use the data only for what is on the list below.
- Replying to people who write to us and following the conversation. Legal basis: the legitimate interest of my2brain in replying to people who contact it (LGPD art. 7, IX) and, when a message asks for something that comes before a contract, preliminary procedures at the request of the data subject (art. 7, V).
- Keeping the site online and secure, using the hosting provider’s technical records. Legal basis: legitimate interest (art. 7, IX).
- Complying with legal or regulatory obligations and defending rights in judicial, administrative or arbitration proceedings. Legal basis: art. 7, II and VI.
We do not use your data for advertising, we do not sell lists, we do not send newsletters and we do not profile anyone. The site makes no automated decisions about you.
5. Who we share it with
We do not sell or rent personal data. Sharing is small and has a clear reason.
- Cloudflare, which hosts and distributes the site and therefore processes the technical access data.
- The email service my2brain uses to receive and store the messages sent to the contact address.
- Public authorities, when the law or a court order requires it.
When data is shared, it is limited to what the purpose requires.
6. International transfer
Cloudflare runs a network with servers in many countries. For that reason, technical access data may be processed outside Brazil. The same may happen with the email service used to receive your messages.
When this happens, the transfer relies on the grounds in article 33 of the LGPD and on the rules of the Brazilian National Data Protection Authority (ANPD), according to each provider’s contractual instruments. You can ask for more information at the contact email.
7. How long we keep it
Messages received by email are kept for as long as needed to reply, follow the matter and meet legal obligations. After that, they are deleted or anonymized, as provided in article 16 of the LGPD.
Technical access records follow the retention period of the hosting provider.
If you ask for deletion sooner, we erase whatever we are not required by law to keep.
8. Cookies and similar technologies
The site’s code sets no cookies and uses no local storage or similar tracking technology. For that reason, the site shows no cookie banner.
We do not control technical cookies that Cloudflare’s network infrastructure may set for security. If they exist, they protect the network. They are not used for advertising or for analyzing your behavior.
9. Your rights as a data subject
Article 18 of the LGPD gives you, at any time and on request:
- confirmation that we handle your data;
- access to the data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data handled in breach of the law;
- portability of the data, under the ANPD’s regulations;
- deletion of data handled on the basis of your consent;
- information about who we share the data with;
- information about the option of not giving consent and the consequences of refusing;
- withdrawal of consent.
To exercise any of these rights, write to contato@my2brain.online and say what you need. We may ask you to confirm your identity, preferably by replying from the same email address you used before. The request is free of charge.
We reply within the deadlines of article 19 of the LGPD: immediately, in a simplified format, or within 15 days, with the full statement. If we do not resolve the matter, you may file a petition with the ANPD.
10. Security
The site is static. It has no database, no restricted area and no user dashboard, which reduces the attack surface. Messages received stay in my2brain’s email service, with access limited to the people who need them to reply.
If a security incident occurs that may cause relevant harm, we will notify you and the ANPD as required by article 48 of the LGPD.
11. Children and teenagers
The site is aimed at adults and professionals. We do not intentionally collect data from children and teenagers. If we receive a message from someone under 18 without a guardian’s involvement, we delete the content.
12. Data protection officer
The data protection officer can be reached at contato@my2brain.online. The role is performed by the my2brain team. Data subjects and the ANPD can use this address for any data protection matter.
13. Changes to this policy
We may update this policy when the site or the law changes. The version in force is always the one published on this page, with its effective date at the top. This policy is governed by Brazilian law and should be read together with the Terms of use.